Virtual TapeServer 6.03.42 Operations and Administration Guide

78 | Using SecureVTS
If three VTS servers — A, B, and C — are installed in your environment, you must perform
these tasks to fully enable and configure SecureVTS:
1. Determine which server will be responsible for generating keys. For this example, server
A will be the “key generator”.
2. Add server A as a key generator on servers B and C.
3. On servers B and C, remove the localhost key server. (The localhost entry is configured as
a key generator.)
4. On server A, add server B or C as a key database backup host (in addition to the localhost
entry). You can add server B and C to A as backup hosts if you want to define multiple
backup hosts. As recommended, you should add a backup host that is outside of your VTS
environment (server D in this example).
Here is an illustration of the configuration:
If you choose to designate another server (server C in this example) as the key generator after
server A has generated keys, you must perform these steps to reconfigure the SecureVTS
environment:
1. Add server C as a key generator on servers A, B, and C.
2. Reconfigure server A as a non-key generator on servers A, B, and C. To reconfigure a key
generator as a non-key generator, you must remove the server entry and re-add it,
clearing the Key Generator option.
3. Add database backup hosts on server C: add an entry for the localhost (server C) and add
server A or B as a key database backup host. Server B is added in this example. You can
add server A and B if you want to define multiple backup hosts. You can also remove the
backup hosts that are defined on server A, though there is no harm in keeping the entry.
Add a backup host that is outside of your VTS environment (server E in this example) on
server C.
Here is an illustration of the modified configuration: